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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn clainns) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e th rough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please CANCEL claims 1 , 2, 1 6, 1 7 and 20; AMEND claims 3-1 5, 1 8 and 1 9; and ADD 
new claims 21-25 in accordance with the following: 

1. (CANCELLED) 

2. (CANCELLED) 

3. (CURRENTLY AMENDED) Method A method according to ono of tho C l a i ms 1 or 3 
feteT claim 21 , where in which in a call mechanism for a function of an operating system core with 
which the programs are executed, a call of the accessing process is forwarded to a checking 
function in which the check is carried out. 

4. (CURRENTLY AMENDED) Methed -A method according to Gtaim -claim 3. where in 
wh i ch the checking function can b e j s_integrated into at least one of the address space of the 
program and/ef the file to be protected as a dynamically integrated file. 

5. (CURRENTLY AMENDED) Methed -A method according to C l aim 1 or 2 claim 21 , -4ft 

which 

wherein a call of the accessing process is forwarded to a checking function in which the 
check takes place, and i n wh i ch 

wherein the checking function is integrated into an operating system core of an operating 
system with which the programs are executed. 

6. (CURRENTLY AMENDED) Methed- A method according to ono of tho C l a i ms 1 
through 5 claim 3 , wherein wWeh-the operating system is Windows NT. 

7. (CURRENTLY AMENDED) Method A method according to ono of tho C l aims 1 
through 6 claim 21 , where in which at a predetermined interval of time for each active process 
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that ains along with a program and/or a file to be protected, a check is made to confirm whether 
the active process is contained in the process file that is assigned to the program and/or the file 
to be protected, and the process is ended if that is not the case. 

8. (CURRENTLY AMENDED) Methed- A method according to ono oftho C l aims 1 
through 7 claim 21 , where in wh i ch in dependency on a predetermined event for each active 
process that runs along with a program and/or a file to be protected, a check is made to confirm 
whether the active process is contained in the process file that is assigned to the progranfi to be 
protected, and the process is ended if that is not the case. 

9. (CURRENTLY AMENDED) Method -A method according to ono oftho Claims 1 
through 8 claim 21 , wherein which a protection program for protect i ng performing the method 
according to on e of th e pr e c e d i ng C l a i ms can bo oxecut e d claim 21 is stored encoded and is 
decoded at the start of the method. 

10. (CURRENTLY AMENDED) Methed -A method according to ono oftho C l a i ms 1 

. through claim 9, where in wWch-the programs and/or th e fil e s to be protected are stored encoded 
and are decoded at the start of the method accord i ng to on e of th e pr e c e d i ng C l aims . 

11 . (CURRENTLY AMENDED) Mett ^A method according to Gclaim 9, where in which 
after the decoding of the protection program, its integrity is checked and the method according to 
on e of th e prec e ding C l a i ms claim 21 is executed only if the integrity of the protection program is 
assured. 

12. (CURRENTLY AMENDED) Methe4 -A method according to Gclaim 11, wherein 
wh i ch after the integrity test of the protection program, the integrity of all processes contained in 
the process files is checked and the method according to on e of th e procodino Claims claim 21 
is executed only if the integrity of all of the processes contained in the process files is assured. 

13. (CURRENTLY AMENDED) Methed -A method according to Gclaim 12, where in 
wh i ch after the integrity test of the processes, the integrity of the program and/or th e fi le to be 
protected is checked and the method according to ono oftho procodino C l a i ms claim 21 is 
executed only if the integrity of the program and/or th e fi le to be protected is assured. 
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14. (CURRENTLY AMENDED) Methed -A method according to Gclaim 4-2-91^13. where in 
wh i ch at least one of the integrity tests takes place through the use of a cryptographic method. 

15. (CURRENTLY AMENDED) Methe4 -A method according to ono of tho C l a i ms 1 
through claim 14, wherein whieh-the cryptographic value is fonned through the use of a hash 
function. 

16. (CANCELLED) 

17. (CANCELLED) 

18. An array according to on e of th e C l aims 16 or 17 claim 23 , where in wh i ch the 
processor is s e t up i n such a way that in programmed to execute a call mechanism for a function 
of an operating system core with which the programs are executed, and a call of the accessing 
process is fonA/arded to a checking function i n which th e ch e ck i s carri e d out to compare the 
accessing cryptographic yalue with the cryptographic yalue stored in the process file . 

19. (CURRENTLY AMENDED) An array according to ono of tho C l a i ms 16 through 
claim 18, where in which th e proc e ssor is s e t up i n such a way that the operating system is 
Windows NT 

20. (CANCELLED) 

21. (NEW) A method for protecting several programs from unauthorized access by 
processes, comprising: 

assigning an address space to each program to be protected; 

assigning a process file to each program to be protected, where the process file is 
separate from the program and includes a cryptographic value that uniquely identifies each 
process that may run in the address space; 

determining, during execution of each program to be protected, for each accessing 
process that attempts to access the address space of the program, whether the accessing 
process is listed in the process file assigned to the program by 

forming an accessing cryptographic value for each accessing process, and 
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comparing the accessing cryptographic value with the cryptographic value stored 
in the process file for each accessing process listed in the process file; and 

at least one of starting and continuing execution of the accessing process only if said 
comparing determines a match between the accessing cryptographic value and the 
cryptographic value stored in the process file for the accessing process. 

22. (NEW) A method for protecting several programs from unauthorized access by 
processes, comprising: 

assigning an address space to each program file to be protected; 

assigning a process file, separate from the program file, to each program file to be 
protected, where the process includes at least one cryptographic value, each uniquely identifying 
a process that may run in the address space ; 

determining, during execution of each program in each program file to be protected, for 
each accessing process that attempts to access the address space of the program file, whether 
the accessing process is listed in the process file assigned to the program file by 

forming an accessing cryptographic value for each accessing process, and 
comparing the accessing cryptographic value with the cryptographic value stored 
in the process file for each accessing process listed in the process file; and 

at least one of starting and continuing execution of the accessing process only if said 
comparing determines a match between the accessing cryptographic value and the 
cryptographic value stored in the process file for the accessing process. 

23. (NEW) An array for protecting several programs from unauthorized access by a 
process, comprising: 

a processor programmed to assign an address space and a process file to each program 
to be protected, where the process file is separate from the program and includes a crypto- 
graphic value that uniquely identifies each process that may run in the address space; to 
determine, during execution of each program to be protected, for each accessing process that 
attempts to access the address space of the program, whether the accessing process is listed in 
the process file assigned to the program by forming an accessing cryptographic value for each 
accessing process and comparing the accessing cryptographic value with the cryptographic 
value stored in the process file for each accessing process listed in the process file; and to at 
least one of start and continue execution of the accessing process only if a match is found 
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between the accessing cryptographic value and the cryptographic value stored in the process 
file for the accessing process. 

24. (NEW) An array for protecting several program files from unauthorized access by a 
process, comprising: 

a processor programmed to assign an address space and a process file to each program 
file to be protected, where the process file is separate from the program file and includes a 
cryptographic value that uniquely identifies each process that may run in the address space; to 
determine, during execution of each program in each program file to be protected, for each 
accessing process that attempts to access the address space of the program file, whether the 
accessing process is listed in the process file assigned to the program file by forming an 
accessing cryptographic value for each accessing process and comparing the accessing 
cryptographic value with the cryptographic value stored in the process file for each accessing 
process listed in the process file; and to at least one of start and continue execution of the 
accessing process only if a match is found between the accessing cryptographic value and the 
cryptographic value stored in the process file for the accessing process. 

25. (NEW) A set of several arrays and a server array connected with each of the 
several arrays, to protect several programs from unauthorized access by a process, comprising 

in each of the several arrays a processor programmed to assign an address space and a 
process file to each program file to be protected, where the process file is separate from the 
program file and includes a cryptographic value that uniquely identifies each process that may 
run in the address space; to determine, during execution of each program in each program file to 
be protected, for each accessing process that attempts to access the address. space of the 
program file, whether the accessing process is listed in the process file assigned to the program 
file by forming an accessing cryptographic value for each accessing process and comparing the 
accessing cryptographic value with the cryptographic value stored in the process file for each 
accessing process listed in the process file; and to at least one of start and continue execution of 
the accessing process only if a match is found between the accessing cryptographic value and 
the cryptographic value stored in the process file for the accessing process. 
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